Under the deal, U.S. intelligence agencies' access to data is limited to what's "necessary and proportionate" to protect national security. Europeans who suspect U.S. authorities have accessed their data will be able to complain to a new Data Protection Review Court, made up of judges appointed from outside the U.S. government. The threshold to file a complaint will be "very low" and won't require people to prove their data has been accessed, Reynders said.